LLMHigh
CVE-2026-117559: DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass…
- Occurred
- Oct 27, 2026
- Published
- Oct 27, 2026
- Source
- NVD CVE
Summary
DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.run_shell() or unvalidated Device.list_directory() to run blocked commands such as reboot on connected Android devices.
Tags
- CVE
- CVE-2026-117559
- cvss:HIGH
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: Command injection vulnerability in AI agent framework allows bypassing security controls to execute arbitrary commands on devices.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8